CVE-2023-40193: TP-Link Deco m4 Firmware

High severity, CVSS 8.0. EPSS: 0.4% chance of exploitation in the next 30 days.

Deco M4 firmware versions prior to 'Deco M4(JP)_V2_1.5.8 Build 20230619' allows a network-adjacent authenticated attacker to execute arbitrary OS commands.

Affected products

• TP-Link Deco m4 Firmware: before 1.5.8 (fixed in 1.5.8)

Published 2023-09-06. Last modified 2026-06-17.